The pathway
How you actually get there, here
How you become one varies far more by country than what one does. This is the UK route. Most people take one of these ways in; the right one depends on where you're starting from.
- 1
Head of Global Quality Systems / Regulatory Affairs
You'd usually spend 5-8 years in a similar senior leadership role, managing a large team and significant programmes, before stepping into a Director-level position with P&L accountability.Skills to master
- Enterprise QMS implementation, global regulatory strategy, managing large cross-functional teams, executive reporting, budget management (up to £2M).
You're ready to move on when
- Successfully led a major QMS overhaul or new certification programme across multiple regions.
- Consistently received excellent feedback on executive presentations and stakeholder influence.
- Demonstrated ability to manage a departmental budget of £2M+ effectively.
- Developed and mentored several direct reports into more senior leadership roles.
- 2
Senior Legal Counsel (Compliance Focus)
Often, a move from a senior legal role with a strong compliance focus, after 15-20 years in legal practice, including significant in-house experience managing regulatory risk.Skills to master
- Deep regulatory interpretation, legal risk assessment, litigation management (compliance-related), policy development, executive advisory.
You're ready to move on when
- Successfully advised on complex, high-stakes regulatory investigations or enforcement actions.
- Developed and implemented enterprise-wide compliance policies with demonstrable impact.
- Proven ability to translate complex legal requirements into practical business solutions.
- Strong track record of influencing senior business leaders on compliance matters.
- 3
Director of Enterprise Risk Management (ERM)
This path typically involves 15-20 years in risk management, with a strong emphasis on operational and compliance risks, eventually leading a broad ERM function.Skills to master
- Enterprise risk framework design, risk appetite definition, quantitative risk modelling, board reporting on risk, crisis management.
You're ready to move on when
- Successfully designed and implemented an enterprise-wide risk management framework.
- Demonstrated ability to identify and quantify complex operational and compliance risks.
- Regularly presented risk reports and mitigation strategies to the Board or Audit Committee.
- Led significant risk mitigation programmes that delivered measurable business protection.